View all questions & answers for the NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials exam

NSE 7 - Enterprise Firewall 7.6 Administrator Exam Materials - Question #45 Discussion

Comment Image Comment Image Comment Image

Users in your organization who are on an IPsec VPN between FortiGate A and FortiGate B are experiencing intermittent issues since implementing VXLAN. You suspect that packets exceeding the 1500-byte default maximum transmission unit (MTU) are causing the problems. How would you adjust the interface MTU value help resolve issues caused by protocols that add extra headers to IP packets? (Choose one answer)

  • A. Adjust the MTU on interfaces only in wired connections like Point-to-Point Protocol over Ethernet (PPPoE), optic fiber, and Ethernet cable.
  • B. Adjust the MTU on interfaces in controlled environments where all devices along the path allow MTU interface changes.
  • C. Adjust the MTU on interfaces only on FortiGate A and FortiGate B.
  • D. Adjust the MTU on all FortiGate interfaces after adjusting the TCP maximum segment size (MSS).
Correct Answer: B

Brave-Dump Community Votes

Answer: B (3 votes) 100%

Community Explanations & Comments (3)

Adam 9 months ago
Selected: B
From Study Guide:
Changing MTU sizes on internet-facing interfaces is nearly impossible, as control is limited beyond that point. However, experts can modify the MTU in controlled environments, such as internal networks or data centers.
In external communications, such as those across the internet, ensuring a higher MTU from end to end is generally not feasible.
Anonymous User 6 months ago
Selected: B
Enterprise_Firewall_7.6_Administrator_Study_Guide Page 209
Anonymous User 6 months ago
Selected: B
Enterprise_Firewall_7.6_Administrator_Study_Guide Page 209